Vulnerabilities

TI-2020-11079 CVE-2020-14152 · GHSA-q4xh-9r6f-9fg6

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not…

LOW 34

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01488 Published 2020-06-15 Will not fix CWE-400

TI-2020-11080 CVE-2020-14153 · GHSA-9829-xpvg-xp5h

In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array…

LOW 33

In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01008 Published 2020-06-15 Will not fix CWE-125

TI-2018-08462 CVE-2018-11813 · GHSA-32p9-664j-q6j6

libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

LOW 39

libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03139 Published 2018-06-06 Partial fix CWE-834

TI-2018-07978 CVE-2018-11214 · GHSA-c6rg-3w94-c827

An issue was discovered in libjpeg 9a.

LOW 33

An issue was discovered in libjpeg 9a.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02344 Published 2018-05-16 Partial fix

TI-2018-07977 CVE-2018-11213 · GHSA-p54x-fvh8-55xx

An issue was discovered in libjpeg 9a.

LOW 34

An issue was discovered in libjpeg 9a.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02525 Published 2018-05-16 Partial fix

TI-2018-07976 CVE-2018-11212 · GHSA-m7r9-q69w-q556

An issue was discovered in libjpeg 9a and 9d.

LOW 36

An issue was discovered in libjpeg 9a and 9d.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.04558 Published 2018-05-16 Partial fix CWE-369

Vulnerabilities

Filters

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not…

In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array…

libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

An issue was discovered in libjpeg 9a.

An issue was discovered in libjpeg 9a.

An issue was discovered in libjpeg 9a and 9d.